---
# ipt-firewall configuration for o43.oopen.de
# Generated by extract-fw-host-vars.py - review before committing!
# Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml

fw_manage_config: false

# --- Network
fw_ext_interfaces:
  - "br0"
fw_ext_ips_v4:
  - "176.9.62.77"
fw_ext_ips_v6:
  - "2a01:4f8:150:805b::2"
fw_local_interfaces:
  - "br1"
fw_local_interfaces_v6: []
fw_lxc_guest_ips_v4:
  - "176.9.62.69"
  - "176.9.62.106"
fw_lxc_guest_ips_v6:
  - "2a01:4f8:150:805b::69"
  - "2a01:4f8:150:805b::106"

# --- Munin
munin_remote_ipv4: 37.27.121.227
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"

# --- Bridged / LXC
fw_do_not_firewall_bridged_traffic: true
fw_do_not_firewall_lx_guest_systems: true

# --- Outgoing / interfaces
fw_unprotected_ifs: $local_if_1
fw_unprotected_ifs_v6: ""

# --- Forwarding
fw_kernel_activate_forwarding: true
fw_kernel_forward_between_interfaces: true

# --- Kernel IPv4
fw_dynaddr_flag: 1